I have thought about sending authentication codes (OTP) but I'm not sure if the performance might be too poor; could it be that it is not suitable for this because the sending process takes a long time?